February 2026 - Koha-bugs - lists.koha-community.org

[Bug 14962] Temp Shelving Location
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #190218|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14962] Temp Shelving Location
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #190217|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14962] Temp Shelving Location
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #190216|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14962] Temp Shelving Location
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Comma delimited| |ByWater Solutions list of Sponsors| | Patch complexity|--- |Large patch -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #203 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193714 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193714&action=e… Bug 38365: (follow-up) Move default Content-Security-Policy value into Perl module, add tests To test: 1. prove t/Koha/ContentSecurityPolicy.t -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #202 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193713 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193713&action=e… Bug 38365: (follow-up) Only get the nonce in templates if CSP is enabled, add tests To test: 1. prove t/db_dependent/Koha/Template/Plugin/Koha.t -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Lari Taskula <lari.taskula(a)hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193335|0 |1 is obsolete| | --- Comment #201 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193712 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193712&action=e… Bug 38365: Only get the nonce in templates if CSP is enabled Signed-off-by: Lari Taskula <lari.taskula(a)hypernova.fi> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Lari Taskula <lari.taskula(a)hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193312|0 |1 is obsolete| | --- Comment #200 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193711 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193711&action=e… Bug 38365: Add CSP nonces to all inline script and style tags Signed-off-by: Lari Taskula <lari.taskula(a)hypernova.fi> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Lari Taskula <lari.taskula(a)hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193311|0 |1 is obsolete| | --- Comment #199 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193710 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193710&action=e… Bug 38365: Move default Content-Security-Policy value into Perl module By defining a default policy in the Perl module, we can easily update it over time. Using koha-conf.xml will just be for overrides, so people can manage their own there. Signed-off-by: Lari Taskula <lari.taskula(a)hypernova.fi> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Lari Taskula <lari.taskula(a)hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193310|0 |1 is obsolete| | --- Comment #198 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193709 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193709&action=e… Bug 38365: Disable the endpoint when CSP is disabled in KOHA_CONF To test: 1. prove t/db_dependent/api/v1/public/csp_reports.t -- You are receiving this mail because: You are watching all bug changes.

1 0